Re: protect endpoint with basic auth

2018-08-22 Thread Romain Manni-Bucau
Yes works, or even @WebFilter(urlPatterns="/*",asyncSupported=true) Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn

Re: protect endpoint with basic auth

2018-08-22 Thread Matthew Broadhead
Hi Romain, Thanks.  that was the conclusion was coming to.  I am glad it is a valid solution.  I found this example also https://gist.github.com/neolitec/8953607. I guess i will define a filter mapping in web.xml Matthew On 22/08/18 16:01, Romain Manni-Bucau wrote: Hi Matthew, tomcat does

Re: protect endpoint with basic auth

2018-08-22 Thread Romain Manni-Bucau
Hi Matthew, tomcat does that because the spec does (even if several people ask to break that limitation it is not yet done at servlet spec level) that said to secure a rest endpoint you just need a filter in your app and implement the security login in there. you can delegate to the container (req

protect endpoint with basic auth

2018-08-22 Thread Matthew Broadhead
my webapp already has a login-config set to keycloak in web.xml so AFAIK i cannot define any other security configs there.  why doesn't tomcat allow multiple security methods?     KEYCLOAK     secure is there another way to protect a jax-rs endpoint using basic auth without having to create